
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
File: GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft (raw, json)
Hash identifier: pIjkTjGGGOU7hOu71KwJfOeTfea926oGO/xB4z7xkUk=
Subject key identifier: 87:43:A5:7E:A2:D6:D7:E4:C9:49:4C:7B:F2:3F:8C:18:41:1F:92:FC
Authority key identifier: 1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
Certificate issuer: /CN=A91519CC/serialNumber=1B3683525944774388853090D1005BB51552246D
Certificate serial: 9D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
Manifest number: 96
Signing time: Mon 21 Sep 2026 07:29:51 +0000
Manifest this update: Mon 21 Sep 2026 07:29:50 +0000
Manifest next update: Mon 28 Sep 2026 07:29:50 +0000
Files and hashes: 1: GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl (hash: GgF0R3jW8PdqdUbaSKKqsVsZ2/I67hh8j5NLwkJd3Uk=)
2: 9C9F0DC6DA5A11F08EBD209195D3641D.roa (hash: JgdmWI3k7cOqCcItbOe6xRBhm/7mwOzKG5iBpPWBzvY=)
3: 9D232386DA5A11F08EBD209195D3641D.roa (hash: QOzthGopxBzd3k4toAQMU4imXtsyINBxu6ucmSP2zFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 07:29:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 157 (0x9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91519CC, serialNumber=1B3683525944774388853090D1005BB51552246D
Validity
Not Before: Sep 21 07:29:50 2026 GMT
Not After : Sep 28 07:29:50 2026 GMT
Subject: CN=6ab0dcef-6660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:b5:55:c6:5c:1d:cc:b9:f7:3f:69:24:94:
5f:7a:33:1d:0d:50:34:75:74:e1:04:1b:7d:7d:f0:
11:a0:12:1e:19:3f:7f:7c:5e:10:af:8b:77:29:05:
d2:2d:6b:89:68:c4:66:df:be:64:98:2b:f9:b7:02:
4c:08:17:52:c8:55:17:f1:44:d3:f2:fd:ca:af:95:
1b:d3:16:0f:30:68:51:82:76:48:e5:b4:91:f6:ac:
ab:d0:7e:31:19:a6:7c:72:6e:63:a3:4d:5d:e6:f9:
8b:f5:5a:d7:56:38:4a:6b:f7:aa:65:68:96:18:7c:
ad:eb:f2:13:75:b5:ce:63:f5:d2:55:46:c7:6f:43:
8f:b8:90:b0:4b:4b:53:a8:79:69:36:66:da:72:78:
9c:03:2c:e9:22:8e:da:cd:34:54:1e:7e:fe:79:bf:
f6:3a:11:69:44:56:73:66:46:16:ea:58:02:a7:8e:
7e:e9:26:00:79:56:d7:fb:1a:70:3e:f1:06:03:ac:
35:6f:7c:34:e3:94:21:ac:0e:73:1e:c1:1a:b1:90:
b2:ab:a8:f5:eb:7b:bd:82:05:75:df:3c:5f:8e:45:
f8:a0:2f:0f:d5:dd:2a:40:4e:d3:74:8f:96:4f:b7:
6b:6e:70:a7:1b:27:d3:15:15:38:57:53:eb:2d:82:
a5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:43:A5:7E:A2:D6:D7:E4:C9:49:4C:7B:F2:3F:8C:18:41:1F:92:FC
X509v3 Authority Key Identifier:
keyid:1B:36:83:52:59:44:77:43:88:85:30:90:D1:00:5B:B5:15:52:24:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GzaDUllEd0OIhTCQ0QBbtRVSJG0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/9914B8E4DA1F11F0AB820FF784D3641D/GzaDUllEd0OIhTCQ0QBbtRVSJG0.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:d8:73:ba:22:98:9f:55:dd:87:d1:ee:ff:d8:51:de:0e:70:
d7:38:36:d4:4d:e7:4f:d4:fe:df:af:a2:83:7e:ff:8b:b6:ce:
21:43:74:3e:5d:40:49:c7:93:23:4a:60:35:6a:80:53:3e:fb:
53:b2:5a:a6:55:40:33:53:c2:44:db:33:97:4f:95:d0:75:65:
f2:43:33:a5:40:dd:f5:db:d1:6b:57:56:d7:5d:f3:d0:f2:b7:
e2:25:b2:bf:5a:79:7d:da:2d:3f:b0:76:9d:6e:f0:4c:f2:25:
73:5c:1b:0c:6d:2a:5e:4b:e8:c4:d9:a4:2d:60:e2:3f:1a:4b:
65:a7:1c:b8:a5:f1:a8:e9:54:d6:62:9b:85:03:85:3f:2a:26:
23:65:58:53:29:13:8d:96:0b:ce:23:80:3a:1d:de:3b:1d:36:
91:8c:7d:0a:2b:43:27:5e:f3:0a:fc:9c:a9:d7:36:c9:ec:e3:
64:70:66:3c:d2:d9:40:0e:af:da:16:10:60:82:04:85:8c:b4:
f8:71:f4:66:d5:6f:c2:3e:be:b8:f5:3b:97:41:d0:d7:08:5e:
ad:1e:15:f6:ac:4d:b4:38:82:b4:01:9d:8f:49:4c:c1:a5:ea:
83:57:1d:83:49:91:21:ee:e6:05:2f:44:a8:09:90:eb:82:6e:
46:cb:4d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:06:26 2026 by rpki-client